Update shiftleft.yml

[shiftleft-chuck]

No description provided.

[github-actions]

Neither source branch nor scan specified; switching to 'single' mode.

Checking analysis of application shiftleft-java-demo-041222 against 1 build rules.

Checking findings on scan 2.

Results per rule:

• allow-zero-findings: FAIL (185 matched vulnerabilities; configured threshold is 0)

  First 5 findings:

  ID	Severity	Title
  70	critical	pkg:maven/org.springframework.boot/spring-boot-starter-web@1.5.1.RELEASE
  71	critical	pkg:maven/org.springframework.boot/spring-boot-starter-web@1.5.1.RELEASE
  72	critical	pkg:maven/org.springframework.boot/spring-boot@1.5.1.RELEASE
  73	critical	pkg:maven/org.springframework.boot/spring-boot@1.5.1.RELEASE
  78	critical	pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.11

  Severity	Count
  Critical	52
  Moderate	92
  Info	41

  Finding Type	Count
  Vuln	60
  Secret	0
  Insight	0
  Extscan	0
  Oss_vuln	125
  Package	0

  Category	Count
  Sensitive Data Usage	39
  XSS	9
  Directory Traversal	3
  Header Injection	3
  Deserialization	2
  Security Best Practices	2
  Remote Code Execution	1
  Session Injection	1

  OWASP Category	Count
  A3-Sensitive-Data-Exposure	41
  A3-Cross-Site-Scripting	9
  A1-Injection	4
  A5-Broken-Access-Control	3
  A8-Deserialization	2
  A2-Broken-Authentication	1

1 rule failed.